Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    861cb016f70d852ed63f07d193d8d63c066568ab8bedc50e0e87c5e0d1278799

  • Size

    2.0MB

  • Sample

    241025-29ht9atlaq

  • MD5

    b560836e3c8013aedfe9cb9c8a399893

  • SHA1

    7e798f788ba2b39f97f346e5c739a8f7be5e78d3

  • SHA256

    861cb016f70d852ed63f07d193d8d63c066568ab8bedc50e0e87c5e0d1278799

  • SHA512

    4e89a6e222537749a9527e007ce23b98123303053a6cc94510775714809c79f3f779e4f2320dea2a5842273bfd21278c643edff6ecb37eb022ba6fb8b8b604c4

  • SSDEEP

    49152:cgi7tbYOMjUfkptVxOErvL73RLSo+2fhl:cd7tMjUu5brvvRe12fD

Malware Config

Targets

    • Target

      861cb016f70d852ed63f07d193d8d63c066568ab8bedc50e0e87c5e0d1278799

    • Size

      2.0MB

    • MD5

      b560836e3c8013aedfe9cb9c8a399893

    • SHA1

      7e798f788ba2b39f97f346e5c739a8f7be5e78d3

    • SHA256

      861cb016f70d852ed63f07d193d8d63c066568ab8bedc50e0e87c5e0d1278799

    • SHA512

      4e89a6e222537749a9527e007ce23b98123303053a6cc94510775714809c79f3f779e4f2320dea2a5842273bfd21278c643edff6ecb37eb022ba6fb8b8b604c4

    • SSDEEP

      49152:cgi7tbYOMjUfkptVxOErvL73RLSo+2fhl:cd7tMjUu5brvvRe12fD

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks